| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|
| CVE-2022-29978 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA, postponed) | vulnerable | vulnerable | There is a floating point exception error in sixel_encoder_do_resize, ... |
| CVE-2022-29977 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA, postponed) | vulnerable | vulnerable | There is an assertion failure error in stbi__jpeg_huff_decode, stb_ima ... |
| CVE-2022-27046 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in ... |
| CVE-2022-27044 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c: ... |
| CVE-2021-46700 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | vulnerable | In libsixel 1.8.6, sixel_encoder_output_without_macro (called from six ... |
| CVE-2021-45340 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA, ignored) | vulnerable | vulnerable | In Libsixel prior to and including v1.10.3, a NULL pointer dereference ... |
| CVE-2021-41715 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | libsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither ... |
| CVE-2021-40656 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/ ... |
| CVE-2020-36120 | vulnerable | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable | vulnerable | Buffer Overflow in the "sixel_encoder_encode_bytes" function of Libsix ... |
| CVE-2020-21677 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | A heap-based buffer overflow in the sixel_encoder_output_without_macro ... |
| CVE-2020-21548 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_enco ... |
| CVE-2020-21547 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_fun ... |
| CVE-2020-21050 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Libsixel prior to v1.8.3 contains a stack buffer overflow in the funct ... |
| CVE-2020-21049 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An invalid read in the stb_image.h component of libsixel prior to v1.8 ... |
| CVE-2020-21048 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An issue in the dither.c component of libsixel prior to v1.8.4 allows ... |
| CVE-2020-19668 | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | Unverified indexs into the array lead to out of bound access in the gi ... |
| CVE-2020-11721 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitiali ... |
| CVE-2019-20205 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | libsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame. ... |
| CVE-2019-20140 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An issue was discovered in libsixel 1.8.4. There is a heap-based buffe ... |
| CVE-2019-20094 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An issue was discovered in libsixel 1.8.4. There is a heap-based buffe ... |
| CVE-2019-20056 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and o ... |
| CVE-2019-20024 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | A heap-based buffer overflow was discovered in image_buffer_resize in ... |
| CVE-2019-20023 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | A memory leak was discovered in image_buffer_resize in fromsixel.c in ... |
| CVE-2019-20022 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An invalid memory address dereference was discovered in load_pnm in fr ... |
| CVE-2019-19778 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An issue was discovered in libsixel 1.8.2. There is a heap-based buffe ... |
| CVE-2019-19777 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and o ... |
| CVE-2019-19638 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An issue was discovered in libsixel 1.8.2. There is a heap-based buffe ... |
| CVE-2019-19637 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An issue was discovered in libsixel 1.8.2. There is an integer overflo ... |
| CVE-2019-19636 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An issue was discovered in libsixel 1.8.2. There is an integer overflo ... |
| CVE-2019-19635 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | An issue was discovered in libsixel 1.8.2. There is a heap-based buffe ... |
| CVE-2019-3574 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | fixed | In libsixel v1.8.2, there is a heap-based buffer over-read in the func ... |
| CVE-2019-3573 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | fixed | fixed | fixed | In libsixel v1.8.2, there is an infinite loop in the function sixel_de ... |
| CVE-2018-19761 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | fixed | There is an illegal address access at fromsixel.c (function: sixel_dec ... |
| CVE-2018-19759 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | fixed | There is a heap-based buffer over-read at stb_image_write.h (function: ... |
| CVE-2018-19757 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | fixed | There is a NULL pointer dereference at function sixel_helper_set_addit ... |
| CVE-2018-14073 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | fixed | fixed | fixed | libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c ... |
| CVE-2018-14072 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | fixed | fixed | fixed | libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, ... |